cxvyyuj[.]christmas

The domain cxvyyuj.christmas was registered on 10 July 2026 through Spaceship, Inc. and is currently using the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 47.242.217.10, which remains active as of the report date. VirusTotal analysis shows that 4 of 91 scanned security vendors have flagged the domain, indicating a non‑trivial detection rate. The threat classification is generic phishing and the risk level has been assigned as high. No additional intelligence such as page content, observed credential harvesting, or associated malware has been published, so the exact phishing vector and targeted brand remain unknown. Defenders should treat the domain as malicious: block DNS resolution and HTTP/S traffic to 47.242.217.10, add the domain to internal blacklists, and monitor for any outbound connections from internal hosts. Continuous passive DNS monitoring is recommended to detect any future changes to the name‑server set or IP address. Correlation with endpoint telemetry may reveal compromised credentials if users have interacted with the site. Given the recent creation date, the infrastructure is likely still being provisioned, so rapid response is advisable.